CVE-2022-30698 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-30698 Interim 1 15 2023-09-12T23:27:15Z current 2022-08-01T23:32:30Z 2023-09-12T23:27:15Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-30698 NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the subdomain that updates Unbound's delegation cache. This action can be repeated before expiry of the delegation information by querying Unbound for a second level subdomain which the rogue nameserver provides new delegation information. Since Unbound is a child-centric resolver, the ever-updating child delegation information can keep a rogue domain name resolvable long after revocation. From version 1.16.2 on, Unbound checks the validity of parent delegation records before using cached delegation information. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Package Hub 15 SP4 SUSE Linux Enterprise Module for Package Hub 15 SP5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Tumbleweed libunbound2 libunbound8-1.16.2-1.1 python3-unbound-1.16.2-1.1 unbound unbound-1.16.2-1.1 unbound-anchor unbound-anchor-1.16.2-1.1 unbound-devel unbound-devel-1.16.2-1.1 unbound-munin-1.16.2-1.1 unbound-python libunbound8-1.16.2-1.1 as a component of openSUSE Tumbleweed python3-unbound-1.16.2-1.1 as a component of openSUSE Tumbleweed unbound-1.16.2-1.1 as a component of openSUSE Tumbleweed unbound-anchor-1.16.2-1.1 as a component of openSUSE Tumbleweed unbound-devel-1.16.2-1.1 as a component of openSUSE Tumbleweed unbound-munin-1.16.2-1.1 as a component of openSUSE Tumbleweed libunbound2 as a component of SUSE CaaS Platform 4.0 unbound-anchor as a component of SUSE CaaS Platform 4.0 unbound-devel as a component of SUSE CaaS Platform 4.0 unbound as a component of SUSE CaaS Platform 4.0 unbound as a component of SUSE Enterprise Storage 6 unbound as a component of SUSE Enterprise Storage 7 libunbound2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS unbound-anchor as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS unbound-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS unbound as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libunbound2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS unbound-anchor as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS unbound-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS unbound as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libunbound2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 unbound-anchor as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 unbound-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 unbound as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libunbound2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 unbound-anchor as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 unbound-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 unbound as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 unbound as a component of SUSE Linux Enterprise Module for Package Hub 15 SP4 unbound-python as a component of SUSE Linux Enterprise Module for Package Hub 15 SP4 unbound as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 unbound-python as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 libunbound2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS unbound-anchor as a component of SUSE Linux Enterprise Server 15 SP1-LTSS unbound-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS unbound as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libunbound2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS unbound-anchor as a component of SUSE Linux Enterprise Server 15 SP2-LTSS unbound-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS unbound as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libunbound2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 unbound-anchor as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 unbound-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 unbound as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libunbound2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 unbound-anchor as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 unbound-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 unbound as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the subdomain that updates Unbound's delegation cache. This action can be repeated before expiry of the delegation information by querying Unbound for a second level subdomain which the rogue nameserver provides new delegation information. Since Unbound is a child-centric resolver, the ever-updating child delegation information can keep a rogue domain name resolvable long after revocation. From version 1.16.2 on, Unbound checks the validity of parent delegation records before using cached delegation information. CVE-2022-30698 openSUSE Tumbleweed:libunbound8-1.16.2-1.1 openSUSE Tumbleweed:python3-unbound-1.16.2-1.1 openSUSE Tumbleweed:unbound-1.16.2-1.1 openSUSE Tumbleweed:unbound-anchor-1.16.2-1.1 openSUSE Tumbleweed:unbound-devel-1.16.2-1.1 openSUSE Tumbleweed:unbound-munin-1.16.2-1.1 SUSE CaaS Platform 4.0:libunbound2 SUSE CaaS Platform 4.0:unbound SUSE CaaS Platform 4.0:unbound-anchor SUSE CaaS Platform 4.0:unbound-devel SUSE Enterprise Storage 6:unbound SUSE Enterprise Storage 7:unbound SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libunbound2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:unbound SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:unbound-anchor SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:unbound-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libunbound2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:unbound SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:unbound-anchor SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:unbound-devel SUSE Linux Enterprise Module for Basesystem 15 SP4:libunbound2 SUSE Linux Enterprise Module for Basesystem 15 SP4:unbound SUSE Linux Enterprise Module for Basesystem 15 SP4:unbound-anchor SUSE Linux Enterprise Module for Basesystem 15 SP4:unbound-devel SUSE Linux Enterprise Module for Basesystem 15 SP5:libunbound2 SUSE Linux Enterprise Module for Basesystem 15 SP5:unbound SUSE Linux Enterprise Module for Basesystem 15 SP5:unbound-anchor SUSE Linux Enterprise Module for Basesystem 15 SP5:unbound-devel SUSE Linux Enterprise Module for Package Hub 15 SP4:unbound SUSE Linux Enterprise Module for Package Hub 15 SP4:unbound-python SUSE Linux Enterprise Module for Package Hub 15 SP5:unbound SUSE Linux Enterprise Module for Package Hub 15 SP5:unbound-python SUSE Linux Enterprise Server 15 SP1-LTSS:libunbound2 SUSE Linux Enterprise Server 15 SP1-LTSS:unbound SUSE Linux Enterprise Server 15 SP1-LTSS:unbound-anchor SUSE Linux Enterprise Server 15 SP1-LTSS:unbound-devel SUSE Linux Enterprise Server 15 SP2-LTSS:libunbound2 SUSE Linux Enterprise Server 15 SP2-LTSS:unbound SUSE Linux Enterprise Server 15 SP2-LTSS:unbound-anchor SUSE Linux Enterprise Server 15 SP2-LTSS:unbound-devel SUSE Linux Enterprise Server for SAP Applications 15 SP1:libunbound2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:unbound SUSE Linux Enterprise Server for SAP Applications 15 SP1:unbound-anchor SUSE Linux Enterprise Server for SAP Applications 15 SP1:unbound-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:libunbound2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:unbound SUSE Linux Enterprise Server for SAP Applications 15 SP2:unbound-anchor SUSE Linux Enterprise Server for SAP Applications 15 SP2:unbound-devel moderate 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L